svn commit: r1933841 - spamassassin/trunk/rules

Author: spamassassin_role
Date: Tue May  5 08:40:50 2026
New Revision: 1933841

Log:
promotions validated

Modified:
   spamassassin/trunk/rules/active.list

Modified: spamassassin/trunk/rules/active.list
==============================================================================
--- spamassassin/trunk/rules/active.list	Tue May  5 04:20:07 2026	(r1933840)
+++ spamassassin/trunk/rules/active.list	Tue May  5 08:40:50 2026	(r1933841)
@@ -197,7 +197,7 @@ BITCOIN_IMGUR
 # good enough
 BITCOIN_MALF_HTML
 
-# tflags publish
+# tflags net
 BITCOIN_MALWARE
 
 # tflags publish
@@ -435,6 +435,9 @@ DOS_OE_TO_MX
 DOS_OUTLOOK_TO_MX
 
 # good enough
+DOS_RCVD_IP_TWICE_B
+
+# good enough
 DOS_RCVD_IP_TWICE_C
 
 # tflags publish
@@ -512,7 +515,7 @@ FORGED_RELAY_MUA_TO_MX
 # tflags net
 FORGED_SPF_HELO
 
-# tflags publish
+# tflags net
 FORM_FRAUD
 
 # tflags net
@@ -596,7 +599,7 @@ FROM_MISSP_FREEMAIL
 # good enough
 FROM_MISSP_MSFT
 
-# good enough
+# tflags net
 FROM_MISSP_REPLYTO
 
 # tflags net
@@ -734,9 +737,6 @@ FUZZY_WALLET
 # tflags publish
 FUZZY_WELLSFARGO
 
-# good enough
-GAPPY_HTML
-
 # tflags publish
 GAPPY_SALES_LEADS_FREEM
 
@@ -758,7 +758,7 @@ GB_FREEMAIL_DISPTO
 # tflags publish
 GB_FREEMAIL_DISPTO_NOTFREEM
 
-# tflags publish
+# tflags net
 GB_FROM_METAMASK
 
 # tflags publish
@@ -833,6 +833,9 @@ HAS_X_NO_RELAY
 # tflags publish
 HAS_X_OUTGOING_SPAM_STAT
 
+# tflags net
+HDRS_LCASE
+
 # tflags publish
 HDRS_MISSP
 
@@ -1001,6 +1004,9 @@ MALWARE_PASSWORD
 # tflags publish
 MALW_ATTACH
 
+# tflags net
+MANY_HDRS_LCASE
+
 # tflags publish
 MANY_SPAN_IN_TEXT
 
@@ -1193,7 +1199,7 @@ PDS_FRNOM_TODOM_DBL_URL
 # good enough
 PDS_FRNOM_TODOM_NAKED_TO
 
-# good enough
+# tflags net
 PDS_FROM_2_EMAILS
 
 # good enough
@@ -1283,6 +1289,9 @@ RAND_HEADER_MANY
 # tflags publish
 RAND_MKTG_HEADER
 
+# good enough
+RATWARE_NO_RDNS
+
 # tflags net
 RAZOR2_CF_RANGE_51_100
 
@@ -1653,6 +1662,9 @@ SUBJ_ATTENTION
 SUBJ_BRKN_WORDNUMS
 
 # tflags net
+SUBJ_UNNEEDED_HTML
+
+# tflags net
 SURBL_BLOCKED
 
 # good enough
@@ -1667,13 +1679,13 @@ TAGSTAT_IMG_NOT_RCVD_TGST
 # tflags publish
 TARINGANET_IMG_NOT_RCVD_TN
 
-# tflags publish
+# tflags net
 TEQF_USR_IMAGE
 
 # tflags publish
 TEQF_USR_MSGID_HEX
 
-# tflags publish
+# tflags net
 TEQF_USR_MSGID_MALF
 
 # good enough
@@ -1692,6 +1704,9 @@ TONLINE_FAKE_DKIM
 TO_EQ_FM_DIRECT_MX
 
 # tflags net
+TO_EQ_FM_DOM_HTML_IMG
+
+# tflags net
 TO_EQ_FM_DOM_HTML_ONLY
 
 # tflags net
@@ -1700,7 +1715,7 @@ TO_EQ_FM_DOM_SPF_FAIL
 # good enough
 TO_EQ_FM_HTML_DIRECT
 
-# good enough
+# tflags net
 TO_EQ_FM_HTML_ONLY
 
 # tflags net
@@ -1742,9 +1757,12 @@ TVD_PH_7
 # tflags net
 TVD_SPACE_ENCODED
 
-# good enough
+# tflags net
 TVD_SPACE_RATIO_MINFP
 
+# tflags net
+TVD_SUBJ_NUM_OBFU_MINFP
+
 # tflags publish
 TW_GIBBERISH_MANY
 
@@ -1911,9 +1929,6 @@ URI_FLKIPFSXYZIPFS
 URI_GLITCHME
 
 # tflags publish
-URI_GOOGDRAWPREVIEW
-
-# tflags publish
 URI_GOOGDRAWPREVIEW_MINFP
 
 # tflags publish
@@ -1985,7 +2000,7 @@ URI_WP_DIRINDEX
 # tflags net
 URI_WP_HACKED
 
-# tflags publish
+# tflags net
 URI_WP_HACKED_2
 
 # tflags publish